MAL-2025-100906 Malicious code in contemporary_lark-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847bf5f54bd22f5cdb107591c7c81cd65a4577b0f01dc3600a2c1b3ade4a4d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107647 Malicious code in quick_lemur-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42ee011a57b4701dd80029add01d2587b9572adc2baf60cd8e64ff0dc5cc30d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102275 Malicious code in eventual_mole-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8370273611d85cc81887a7c2a3151dbd510ca4e194a8647c004104341a43935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103115 Malicious code in ghjcng-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3cb8be84449e48675e06963d09248604561854f4278d6b76b0da499217f0000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99210 Malicious code in adverse_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abaac2a5a0b8170c56d41f2f09444a32dffbdb8fb3e10fe8f927add3e9653c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107408 Malicious code in psychological_bonobo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427bf408b55060b6076358f7d037b0f267cbb1d1f28e37b2e1615bbccc83bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102869 Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_hedgehog_pink-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd46d9fd3f16db366a2ec4b658da3daf038d714dcdc7b9660d12a77f59c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_anglerfish_indigo-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea16352df76b13d7e4c9b4678459f1126b5ad1a21ed8ca22ecb6b3514532e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105865 Malicious code in minor_felidae_coffee-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a01edf65848f11bf33bb396a670462a8b1ecc9617ceab0f21b664417ac64bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108597 Malicious code in shaky_chickadee_crimson-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac683576125faad821d6328f7fd2ef518655a677c23fa0e09eb8353a65aa234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107155 Malicious code in possible_bonobo_crimson-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3050041090b08dfd57bf5f9556f4c6c36b3478bb5792747d7c5b7b8197436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106396 Malicious code in notable_tapir_salmon-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ed0c3df4002e1b1b3322c37c4afec17f763fc33f054766722fb917ad3d5374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_fowl_white-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a94d2cd8b8db3a66b55adea3f167abc0df75e1967a574bc3b0b40c05cb8a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_sloth_jade-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc87b8a9fc5dc624b3d4cf206dc36de9f63e627e2ea97b82ed8437239064d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...